file[.]exe | Triage™

General

Target
file.exe
Size 220KB
Sample230911-ff9j8adf3x
SHA256 56b20f8eebb0f9ecdd8be61665112fd3ff75d97c037e45bbe1ce74b9d382882f
MD5 78851a1c0aab614459b9cefcb02ae832
SHA1 7adcd4ff05a5b48ea104d8ced22087529e140311
SHA512 7d57cd54fff28446b6ce2e3fac0f0e7d7884debdc6c2d43d7ad6a6956350803cc01400552a359497d295018d82df665027a7621f0aca9ca76b8b981958268c37
SSDEEP 3072:kisOLr6z5bz8PlWBw1/yzYs/OAJ7GG8KU4n5A3ZF7xp:rLY1WWBMgEAZGflR3H
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 220KB

file.exe

IMPHASH f815858bb8146375fb6d659cf6f7de7c
SHA256 56b20f8eebb0f9ecdd8be61665112fd3ff75d97c037e45bbe1ce74b9d382882f
MD5 78851a1c0aab614459b9cefcb02ae832
SHA1 7adcd4ff05a5b48ea104d8ced22087529e140311
SHA512 7d57cd54fff28446b6ce2e3fac0f0e7d7884debdc6c2d43d7ad6a6956350803cc01400552a359497d295018d82df665027a7621f0aca9ca76b8b981958268c37
SSDEEP 3072:kisOLr6z5bz8PlWBw1/yzYs/OAJ7GG8KU4n5A3ZF7xp:rLY1WWBMgEAZGflR3H
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17633

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA SetThreadContext FindFirstChangeNotificationW PeekNamedPipe SetEndOfFile FreeEnvironmentStringsA GetTickCount GetConsoleAliasesLengthA GetDateFormatA ReadConsoleInputA SizeofResource GetFileAttributesW FileTimeToSystemTime GlobalUnlock GetShortPathNameA FindFirstFileA GetLogicalDriveStringsA GetLastError SetLastError GetProcAddress GetTempFileNameW BackupWrite LoadLibraryA CreateHardLinkW SetConsoleCtrlHandler SetFileApisToANSI BeginUpdateResourceA OpenJobObjectW FoldStringA GetModuleHandleA SetCalendarInfoA FindFirstVolumeW ReadConsoleOutputCharacterW WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle VirtualAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer RaiseException Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle HeapSize LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageExtraInfo LoadMenuA DdeQueryStringW GetClassInfoExW GetKeyNameTextW CharToOemBuffW SetClipboardViewer

gdi32

CreateDCA

Sharing